{"id":"CVE-2022-32320","details":"A Cross-Site Request Forgery (CSRF) in Ferdi through 5.8.1 and Ferdium through 6.0.0-nightly.98 allows attackers to read files via an uploaded file such as a settings/preferences file.","modified":"2026-07-15T01:49:15.075512707Z","published":"2022-07-17T16:24:10Z","database_specific":{"osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/32xxx/CVE-2022-32320.json","unresolved_ranges":[{"source":"DESCRIPTION","extracted_events":[{"fixed":"5.8.1"},{"fixed":"6.0.0-nightly.98"}]}],"cna_assigner":"mitre"},"references":[{"type":"WEB","url":"https://getferdi.com/"},{"type":"WEB","url":"https://gist.github.com/omriinbar-cyesec/c1179fe99725d2b828b6573c0d110c9c"},{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/32xxx/CVE-2022-32320.json"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2022-32320"},{"type":"PACKAGE","url":"https://github.com/getferdi/ferdi"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/ferdium/ferdium-app","events":[{"introduced":"955ab6b5c79e91a78cdfb73cb262fc51663ba6d0"},{"last_affected":"8bd534e61dcdb4e29a3b39ef74c7930d1364700e"}],"database_specific":{"cpe":["cpe:2.3:a:ferdium:ferdium:6.0.0:-:*:*:*:*:*:*","cpe:2.3:a:ferdium:ferdium:6.0.0:nightly1:*:*:*:*:*:*","cpe:2.3:a:ferdium:ferdium:6.0.0:nightly10:*:*:*:*:*:*","cpe:2.3:a:ferdium:ferdium:6.0.0:nightly11:*:*:*:*:*:*","cpe:2.3:a:ferdium:ferdium:6.0.0:nightly12:*:*:*:*:*:*","cpe:2.3:a:ferdium:ferdium:6.0.0:nightly13:*:*:*:*:*:*","cpe:2.3:a:ferdium:ferdium:6.0.0:nightly14:*:*:*:*:*:*","cpe:2.3:a:ferdium:ferdium:6.0.0:nightly15:*:*:*:*:*:*","cpe:2.3:a:ferdium:ferdium:6.0.0:nightly16:*:*:*:*:*:*","cpe:2.3:a:ferdium:ferdium:6.0.0:nightly17:*:*:*:*:*:*","cpe:2.3:a:ferdium:ferdium:6.0.0:nightly18:*:*:*:*:*:*","cpe:2.3:a:ferdium:ferdium:6.0.0:nightly19:*:*:*:*:*:*","cpe:2.3:a:ferdium:ferdium:6.0.0:nightly2:*:*:*:*:*:*","cpe:2.3:a:ferdium:ferdium:6.0.0:nightly20:*:*:*:*:*:*","cpe:2.3:a:ferdium:ferdium:6.0.0:nightly21:*:*:*:*:*:*","cpe:2.3:a:ferdium:ferdium:6.0.0:nightly22:*:*:*:*:*:*","cpe:2.3:a:ferdium:ferdium:6.0.0:nightly23:*:*:*:*:*:*","cpe:2.3:a:ferdium:ferdium:6.0.0:nightly24:*:*:*:*:*:*","cpe:2.3:a:ferdium:ferdium:6.0.0:nightly25:*:*:*:*:*:*","cpe:2.3:a:ferdium:ferdium:6.0.0:nightly26:*:*:*:*:*:*","cpe:2.3:a:ferdium:ferdium:6.0.0:nightly27:*:*:*:*:*:*","cpe:2.3:a:ferdium:ferdium:6.0.0:nightly28:*:*:*:*:*:*","cpe:2.3:a:ferdium:ferdium:6.0.0:nightly29:*:*:*:*:*:*","cpe:2.3:a:ferdium:ferdium:6.0.0:nightly3:*:*:*:*:*:*","cpe:2.3:a:ferdium:ferdium:6.0.0:nightly30:*:*:*:*:*:*","cpe:2.3:a:ferdium:ferdium:6.0.0:nightly31:*:*:*:*:*:*","cpe:2.3:a:ferdium:ferdium:6.0.0:nightly32:*:*:*:*:*:*","cpe:2.3:a:ferdium:ferdium:6.0.0:nightly33:*:*:*:*:*:*","cpe:2.3:a:ferdium:ferdium:6.0.0:nightly34:*:*:*:*:*:*","cpe:2.3:a:ferdium:ferdium:6.0.0:nightly35:*:*:*:*:*:*","cpe:2.3:a:ferdium:ferdium:6.0.0:nightly36:*:*:*:*:*:*","cpe:2.3:a:ferdium:ferdium:6.0.0:nightly37:*:*:*:*:*:*","cpe:2.3:a:ferdium:ferdium:6.0.0:nightly38:*:*:*:*:*:*","cpe:2.3:a:ferdium:ferdium:6.0.0:nightly39:*:*:*:*:*:*","cpe:2.3:a:ferdium:ferdium:6.0.0:nightly4:*:*:*:*:*:*","cpe:2.3:a:ferdium:ferdium:6.0.0:nightly40:*:*:*:*:*:*","cpe:2.3:a:ferdium:ferdium:6.0.0:nightly41:*:*:*:*:*:*","cpe:2.3:a:ferdium:ferdium:6.0.0:nightly42:*:*:*:*:*:*","cpe:2.3:a:ferdium:ferdium:6.0.0:nightly43:*:*:*:*:*:*","cpe:2.3:a:ferdium:ferdium:6.0.0:nightly44:*:*:*:*:*:*","cpe:2.3:a:ferdium:ferdium:6.0.0:nightly45:*:*:*:*:*:*","cpe:2.3:a:ferdium:ferdium:6.0.0:nightly46:*:*:*:*:*:*","cpe:2.3:a:ferdium:ferdium:6.0.0:nightly47:*:*:*:*:*:*","cpe:2.3:a:ferdium:ferdium:6.0.0:nightly48:*:*:*:*:*:*","cpe:2.3:a:ferdium:ferdium:6.0.0:nightly49:*:*:*:*:*:*","cpe:2.3:a:ferdium:ferdium:6.0.0:nightly5:*:*:*:*:*:*","cpe:2.3:a:ferdium:ferdium:6.0.0:nightly50:*:*:*:*:*:*","cpe:2.3:a:ferdium:ferdium:6.0.0:nightly51:*:*:*:*:*:*","cpe:2.3:a:ferdium:ferdium:6.0.0:nightly52:*:*:*:*:*:*","cpe:2.3:a:ferdium:ferdium:6.0.0:nightly53:*:*:*:*:*:*","cpe:2.3:a:ferdium:ferdium:6.0.0:nightly54:*:*:*:*:*:*","cpe:2.3:a:ferdium:ferdium:6.0.0:nightly55:*:*:*:*:*:*","cpe:2.3:a:ferdium:ferdium:6.0.0:nightly56:*:*:*:*:*:*","cpe:2.3:a:ferdium:ferdium:6.0.0:nightly57:*:*:*:*:*:*","cpe:2.3:a:ferdium:ferdium:6.0.0:nightly58:*:*:*:*:*:*","cpe:2.3:a:ferdium:ferdium:6.0.0:nightly59:*:*:*:*:*:*","cpe:2.3:a:ferdium:ferdium:6.0.0:nightly6:*:*:*:*:*:*","cpe:2.3:a:ferdium:ferdium:6.0.0:nightly60:*:*:*:*:*:*","cpe:2.3:a:ferdium:ferdium:6.0.0:nightly61:*:*:*:*:*:*","cpe:2.3:a:ferdium:ferdium:6.0.0:nightly62:*:*:*:*:*:*","cpe:2.3:a:ferdium:ferdium:6.0.0:nightly63:*:*:*:*:*:*","cpe:2.3:a:ferdium:ferdium:6.0.0:nightly65:*:*:*:*:*:*","cpe:2.3:a:ferdium:ferdium:6.0.0:nightly66:*:*:*:*:*:*","cpe:2.3:a:ferdium:ferdium:6.0.0:nightly67:*:*:*:*:*:*","cpe:2.3:a:ferdium:ferdium:6.0.0:nightly69:*:*:*:*:*:*","cpe:2.3:a:ferdium:ferdium:6.0.0:nightly7:*:*:*:*:*:*","cpe:2.3:a:ferdium:ferdium:6.0.0:nightly70:*:*:*:*:*:*","cpe:2.3:a:ferdium:ferdium:6.0.0:nightly71:*:*:*:*:*:*","cpe:2.3:a:ferdium:ferdium:6.0.0:nightly72:*:*:*:*:*:*","cpe:2.3:a:ferdium:ferdium:6.0.0:nightly73:*:*:*:*:*:*","cpe:2.3:a:ferdium:ferdium:6.0.0:nightly74:*:*:*:*:*:*","cpe:2.3:a:ferdium:ferdium:6.0.0:nightly76:*:*:*:*:*:*","cpe:2.3:a:ferdium:ferdium:6.0.0:nightly77:*:*:*:*:*:*","cpe:2.3:a:ferdium:ferdium:6.0.0:nightly78:*:*:*:*:*:*","cpe:2.3:a:ferdium:ferdium:6.0.0:nightly79:*:*:*:*:*:*","cpe:2.3:a:ferdium:ferdium:6.0.0:nightly8:*:*:*:*:*:*","cpe:2.3:a:ferdium:ferdium:6.0.0:nightly80:*:*:*:*:*:*","cpe:2.3:a:ferdium:ferdium:6.0.0:nightly81:*:*:*:*:*:*","cpe:2.3:a:ferdium:ferdium:6.0.0:nightly82:*:*:*:*:*:*","cpe:2.3:a:ferdium:ferdium:6.0.0:nightly83:*:*:*:*:*:*","cpe:2.3:a:ferdium:ferdium:6.0.0:nightly84:*:*:*:*:*:*","cpe:2.3:a:ferdium:ferdium:6.0.0:nightly85:*:*:*:*:*:*","cpe:2.3:a:ferdium:ferdium:6.0.0:nightly86:*:*:*:*:*:*","cpe:2.3:a:ferdium:ferdium:6.0.0:nightly87:*:*:*:*:*:*","cpe:2.3:a:ferdium:ferdium:6.0.0:nightly88:*:*:*:*:*:*","cpe:2.3:a:ferdium:ferdium:6.0.0:nightly89:*:*:*:*:*:*","cpe:2.3:a:ferdium:ferdium:6.0.0:nightly9:*:*:*:*:*:*","cpe:2.3:a:ferdium:ferdium:6.0.0:nightly90:*:*:*:*:*:*","cpe:2.3:a:ferdium:ferdium:6.0.0:nightly91:*:*:*:*:*:*","cpe:2.3:a:ferdium:ferdium:6.0.0:nightly92:*:*:*:*:*:*","cpe:2.3:a:ferdium:ferdium:6.0.0:nightly93:*:*:*:*:*:*","cpe:2.3:a:ferdium:ferdium:6.0.0:nightly94:*:*:*:*:*:*","cpe:2.3:a:ferdium:ferdium:6.0.0:nightly95:*:*:*:*:*:*","cpe:2.3:a:ferdium:ferdium:6.0.0:nightly96:*:*:*:*:*:*","cpe:2.3:a:ferdium:ferdium:6.0.0:nightly97:*:*:*:*:*:*","cpe:2.3:a:ferdium:ferdium:6.0.0:nightly98:*:*:*:*:*:*"],"extracted_events":[{"introduced":"6.0.0-NA"},{"last_affected":"6.0.0-NA"},{"introduced":"6.0.0-nightly1"},{"last_affected":"6.0.0-nightly1"},{"introduced":"6.0.0-nightly10"},{"last_affected":"6.0.0-nightly10"},{"introduced":"6.0.0-nightly11"},{"last_affected":"6.0.0-nightly11"},{"introduced":"6.0.0-nightly12"},{"last_affected":"6.0.0-nightly12"},{"introduced":"6.0.0-nightly13"},{"last_affected":"6.0.0-nightly13"},{"introduced":"6.0.0-nightly14"},{"last_affected":"6.0.0-nightly14"},{"introduced":"6.0.0-nightly15"},{"last_affected":"6.0.0-nightly15"},{"introduced":"6.0.0-nightly16"},{"last_affected":"6.0.0-nightly16"},{"introduced":"6.0.0-nightly17"},{"last_affected":"6.0.0-nightly17"},{"introduced":"6.0.0-nightly18"},{"last_affected":"6.0.0-nightly18"},{"introduced":"6.0.0-nightly19"},{"last_affected":"6.0.0-nightly19"},{"introduced":"6.0.0-nightly2"},{"last_affected":"6.0.0-nightly2"},{"introduced":"6.0.0-nightly20"},{"last_affected":"6.0.0-nightly20"},{"introduced":"6.0.0-nightly21"},{"last_affected":"6.0.0-nightly21"},{"introduced":"6.0.0-nightly22"},{"last_affected":"6.0.0-nightly22"},{"introduced":"6.0.0-nightly23"},{"last_affected":"6.0.0-nightly23"},{"introduced":"6.0.0-nightly24"},{"last_affected":"6.0.0-nightly24"},{"introduced":"6.0.0-nightly25"},{"last_affected":"6.0.0-nightly25"},{"introduced":"6.0.0-nightly26"},{"last_affected":"6.0.0-nightly26"},{"introduced":"6.0.0-nightly27"},{"last_affected":"6.0.0-nightly27"},{"introduced":"6.0.0-nightly28"},{"last_affected":"6.0.0-nightly28"},{"introduced":"6.0.0-nightly29"},{"last_affected":"6.0.0-nightly29"},{"introduced":"6.0.0-nightly3"},{"last_affected":"6.0.0-nightly3"},{"introduced":"6.0.0-nightly30"},{"last_affected":"6.0.0-nightly30"},{"introduced":"6.0.0-nightly31"},{"last_affected":"6.0.0-nightly31"},{"introduced":"6.0.0-nightly32"},{"last_affected":"6.0.0-nightly32"},{"introduced":"6.0.0-nightly33"},{"last_affected":"6.0.0-nightly33"},{"introduced":"6.0.0-nightly34"},{"last_affected":"6.0.0-nightly34"},{"introduced":"6.0.0-nightly35"},{"last_affected":"6.0.0-nightly35"},{"introduced":"6.0.0-nightly36"},{"last_affected":"6.0.0-nightly36"},{"introduced":"6.0.0-nightly37"},{"last_affected":"6.0.0-nightly37"},{"introduced":"6.0.0-nightly38"},{"last_affected":"6.0.0-nightly38"},{"introduced":"6.0.0-nightly39"},{"last_affected":"6.0.0-nightly39"},{"introduced":"6.0.0-nightly4"},{"last_affected":"6.0.0-nightly4"},{"introduced":"6.0.0-nightly40"},{"last_affected":"6.0.0-nightly40"},{"introduced":"6.0.0-nightly41"},{"last_affected":"6.0.0-nightly41"},{"introduced":"6.0.0-nightly42"},{"last_affected":"6.0.0-nightly42"},{"introduced":"6.0.0-nightly43"},{"last_affected":"6.0.0-nightly43"},{"introduced":"6.0.0-nightly44"},{"last_affected":"6.0.0-nightly44"},{"introduced":"6.0.0-nightly45"},{"last_affected":"6.0.0-nightly45"},{"introduced":"6.0.0-nightly46"},{"last_affected":"6.0.0-nightly46"},{"introduced":"6.0.0-nightly47"},{"last_affected":"6.0.0-nightly47"},{"introduced":"6.0.0-nightly48"},{"last_affected":"6.0.0-nightly48"},{"introduced":"6.0.0-nightly49"},{"last_affected":"6.0.0-nightly49"},{"introduced":"6.0.0-nightly5"},{"last_affected":"6.0.0-nightly5"},{"introduced":"6.0.0-nightly50"},{"last_affected":"6.0.0-nightly50"},{"introduced":"6.0.0-nightly51"},{"last_affected":"6.0.0-nightly51"},{"introduced":"6.0.0-nightly52"},{"last_affected":"6.0.0-nightly52"},{"introduced":"6.0.0-nightly53"},{"last_affected":"6.0.0-nightly53"},{"introduced":"6.0.0-nightly54"},{"last_affected":"6.0.0-nightly54"},{"introduced":"6.0.0-nightly55"},{"last_affected":"6.0.0-nightly55"},{"introduced":"6.0.0-nightly56"},{"last_affected":"6.0.0-nightly56"},{"introduced":"6.0.0-nightly57"},{"last_affected":"6.0.0-nightly57"},{"introduced":"6.0.0-nightly58"},{"last_affected":"6.0.0-nightly58"},{"introduced":"6.0.0-nightly59"},{"last_affected":"6.0.0-nightly59"},{"introduced":"6.0.0-nightly6"},{"last_affected":"6.0.0-nightly6"},{"introduced":"6.0.0-nightly60"},{"last_affected":"6.0.0-nightly60"},{"introduced":"6.0.0-nightly61"},{"last_affected":"6.0.0-nightly61"},{"introduced":"6.0.0-nightly62"},{"last_affected":"6.0.0-nightly62"},{"introduced":"6.0.0-nightly63"},{"last_affected":"6.0.0-nightly63"},{"introduced":"6.0.0-nightly65"},{"last_affected":"6.0.0-nightly65"},{"introduced":"6.0.0-nightly66"},{"last_affected":"6.0.0-nightly66"},{"introduced":"6.0.0-nightly67"},{"last_affected":"6.0.0-nightly67"},{"introduced":"6.0.0-nightly69"},{"last_affected":"6.0.0-nightly69"},{"introduced":"6.0.0-nightly7"},{"last_affected":"6.0.0-nightly7"},{"introduced":"6.0.0-nightly70"},{"last_affected":"6.0.0-nightly70"},{"introduced":"6.0.0-nightly71"},{"last_affected":"6.0.0-nightly71"},{"introduced":"6.0.0-nightly72"},{"last_affected":"6.0.0-nightly72"},{"introduced":"6.0.0-nightly73"},{"last_affected":"6.0.0-nightly73"},{"introduced":"6.0.0-nightly74"},{"last_affected":"6.0.0-nightly74"},{"introduced":"6.0.0-nightly76"},{"last_affected":"6.0.0-nightly76"},{"introduced":"6.0.0-nightly77"},{"last_affected":"6.0.0-nightly77"},{"introduced":"6.0.0-nightly78"},{"last_affected":"6.0.0-nightly78"},{"introduced":"6.0.0-nightly79"},{"last_affected":"6.0.0-nightly79"},{"introduced":"6.0.0-nightly8"},{"last_affected":"6.0.0-nightly8"},{"introduced":"6.0.0-nightly80"},{"last_affected":"6.0.0-nightly80"},{"introduced":"6.0.0-nightly81"},{"last_affected":"6.0.0-nightly81"},{"introduced":"6.0.0-nightly82"},{"last_affected":"6.0.0-nightly82"},{"introduced":"6.0.0-nightly83"},{"last_affected":"6.0.0-nightly83"},{"introduced":"6.0.0-nightly84"},{"last_affected":"6.0.0-nightly84"},{"introduced":"6.0.0-nightly85"},{"last_affected":"6.0.0-nightly85"},{"introduced":"6.0.0-nightly86"},{"last_affected":"6.0.0-nightly86"},{"introduced":"6.0.0-nightly87"},{"last_affected":"6.0.0-nightly87"},{"introduced":"6.0.0-nightly88"},{"last_affected":"6.0.0-nightly88"},{"introduced":"6.0.0-nightly89"},{"last_affected":"6.0.0-nightly89"},{"introduced":"6.0.0-nightly9"},{"last_affected":"6.0.0-nightly9"},{"introduced":"6.0.0-nightly90"},{"last_affected":"6.0.0-nightly90"},{"introduced":"6.0.0-nightly91"},{"last_affected":"6.0.0-nightly91"},{"introduced":"6.0.0-nightly92"},{"last_affected":"6.0.0-nightly92"},{"introduced":"6.0.0-nightly93"},{"last_affected":"6.0.0-nightly93"},{"introduced":"6.0.0-nightly94"},{"last_affected":"6.0.0-nightly94"},{"introduced":"6.0.0-nightly95"},{"last_affected":"6.0.0-nightly95"},{"introduced":"6.0.0-nightly96"},{"last_affected":"6.0.0-nightly96"},{"introduced":"6.0.0-nightly97"},{"last_affected":"6.0.0-nightly97"},{"introduced":"6.0.0-nightly98"},{"last_affected":"6.0.0-nightly98"}],"source":"CPE_STRING"}}],"versions":["6.0.0-NA","6.0.0-nightly1","6.0.0-nightly10","6.0.0-nightly11","6.0.0-nightly12","6.0.0-nightly13","6.0.0-nightly14","6.0.0-nightly15","6.0.0-nightly16","6.0.0-nightly17","6.0.0-nightly18","6.0.0-nightly19","6.0.0-nightly2","6.0.0-nightly20","6.0.0-nightly21","6.0.0-nightly22","6.0.0-nightly23","6.0.0-nightly24","6.0.0-nightly25","6.0.0-nightly26","6.0.0-nightly27","6.0.0-nightly28","6.0.0-nightly29","6.0.0-nightly3","6.0.0-nightly30","6.0.0-nightly31","6.0.0-nightly32","6.0.0-nightly33","6.0.0-nightly34","6.0.0-nightly35","6.0.0-nightly36","6.0.0-nightly37","6.0.0-nightly38","6.0.0-nightly39","6.0.0-nightly4","6.0.0-nightly40","6.0.0-nightly41","6.0.0-nightly42","6.0.0-nightly43","6.0.0-nightly44","6.0.0-nightly45","6.0.0-nightly46","6.0.0-nightly47","6.0.0-nightly48","6.0.0-nightly49","6.0.0-nightly5","6.0.0-nightly50","6.0.0-nightly51","6.0.0-nightly52","6.0.0-nightly53","6.0.0-nightly54","6.0.0-nightly55","6.0.0-nightly56","6.0.0-nightly57","6.0.0-nightly58","6.0.0-nightly59","6.0.0-nightly6","6.0.0-nightly60","6.0.0-nightly61","6.0.0-nightly62","6.0.0-nightly63","6.0.0-nightly65","6.0.0-nightly66","6.0.0-nightly67","6.0.0-nightly69","6.0.0-nightly7","6.0.0-nightly70","6.0.0-nightly71","6.0.0-nightly72","6.0.0-nightly73","6.0.0-nightly74","6.0.0-nightly76","6.0.0-nightly77","6.0.0-nightly78","6.0.0-nightly79","6.0.0-nightly8","6.0.0-nightly80","6.0.0-nightly81","6.0.0-nightly82","6.0.0-nightly83","6.0.0-nightly84","6.0.0-nightly85","6.0.0-nightly86","6.0.0-nightly87","6.0.0-nightly88","6.0.0-nightly89","6.0.0-nightly9","6.0.0-nightly90","6.0.0-nightly91","6.0.0-nightly92","6.0.0-nightly93","6.0.0-nightly94","6.0.0-nightly95","6.0.0-nightly96","6.0.0-nightly97","6.0.0-nightly98"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2022-32320.json"}}],"schema_version":"1.7.5"}